RHBA-2016:0892 - Bug Fix Advisory

Topic

An update for luci is now available for Red Hat Enterprise Linux 6.

Description

The luci packages provide a web-based high-availability cluster configuration application built on the TurboGears 2 framework.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.8 Release Notes and Red Hat Enterprise Linux 6.8 Technical Notes linked from the References section.

Users of luci are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux High Availability for x86_64 6 x86_64
• Red Hat Enterprise Linux High Availability for x86_64 6 i386
• Red Hat Enterprise Linux Resilient Storage for x86_64 6 x86_64
• Red Hat Enterprise Linux Resilient Storage for x86_64 6 i386
• Red Hat Enterprise Linux High Availability (for RHEL Server) from RHUI 6 x86_64
• Red Hat Enterprise Linux High Availability (for RHEL Server) from RHUI 6 i386
• Red Hat Enterprise Linux Resilient Storage (for RHEL Server) from RHUI 6 x86_64
• Red Hat Enterprise Linux Resilient Storage (for RHEL Server) from RHUI 6 i386

Fixes

• BZ - 988945 - dlm/gfs_controld: possibly wrong default for plock_ownership attribute
• BZ - 1156167 - luci still agrees on SSLv2 and SSLv3 connections with a web interface client/browser by default
• BZ - 1156187 - luci still agrees on SSLv2 and SSLv3 connections with ricci (if for some esoteric reason forced to)
• BZ - 1208649 - [RA] unused named_sdb parameter for named
• BZ - 1285840 - bad handling of binary values (totem/@secauth and perhaps more)

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal